Быстрый старт: self-hosted

docker run -d --name veriqa \
  -p 8080:8080 \
  -e ASPNETCORE_ENVIRONMENT=Production \
  -e Veriqa__OpenIddict__Database__Provider=PostgreSQL \
  -e Veriqa__OpenIddict__Database__ConnectionString="Host=postgres;Database=veriqa;Username=veriqa;Password=…" \
  -e Veriqa__TransactionEngine__Store__Provider=PostgreSQL \
  -e Veriqa__TransactionEngine__Store__ConnectionString="Host=postgres;Database=veriqa;Username=veriqa;Password=…" \
  -e Veriqa__Channels__Telegram__Enabled=true \
  -e Veriqa__Channels__Telegram__BotToken="YOUR_BOT_TOKEN" \
  -e Veriqa__Channels__Telegram__WebhookBaseUrl="https://auth.your-domain.com" \
  -e Veriqa__Channels__Telegram__WebhookSecretToken="YOUR_SECRET" \
  -e Veriqa__Channels__Telegram__InboundVerification=shared_secret \
  registry.gitlab.com/veriqa/veriqa

{
  "Veriqa": {
    "OpenIddict": {
      "Clients": [
        {
          "ClientId": "my-app",
          "DisplayName": "My Application",
          "AllowedRedirectUris": [ "https://app.your-domain.com/signin-oidc" ],
          "AllowedScopes": [ "openid", "profile", "offline_access" ],
          "AllowRefreshTokens": true
        }
      ]
    }
  }
}

using Microsoft.AspNetCore.Authentication.Cookies;
using Microsoft.AspNetCore.Authentication.OpenIdConnect;

builder.Services
    .AddAuthentication(options =>
    {
        options.DefaultScheme = CookieAuthenticationDefaults.AuthenticationScheme;
        options.DefaultChallengeScheme = OpenIdConnectDefaults.AuthenticationScheme;
    })
    .AddCookie()
    .AddOpenIdConnect(options =>
    {
        options.Authority = "https://auth.your-domain.com";
        options.ClientId = "my-app";
        options.ResponseType = "code";
        options.Scope.Add("profile");
        options.CallbackPath = "/signin-oidc";

        // Veriqa выдаёт имя пользователя коротким OIDC-claim `name`, а User.Identity.Name по
        // умолчанию ищет ClaimTypes.Name (длинный URI WS-Federation) — без этой строки имя после
        // успешного входа останется пустым.
        options.TokenValidationParameters.NameClaimType = "name";
    });

{
  "ForwardedHeaders": {
    "KnownProxies": [ "10.0.0.5" ],
    "KnownIPNetworks": [ "10.0.0.0/8" ]
  }
}